Abstract: Systems and methods for generating secure ephemeral cloud-based computing resources for data operations is provided. In one or more examples, a computing hub can receive a data set as well as one or more business process instructions from an external entity. In response to receiving the data set and business process instructions, the computing hub can create one or more containers within a persistent data storage computing resource and store the data set in the one or more containers. The computing hub can generate one or more cloud-based computing resources on one or more cloud-based computing resource platforms based on the received business processes. The computing hub can be configured to arbitrate access to the stored data set from the generated cloud-based computing resources and can be also configured to track lineage information of the data set as it is process by the one or more cloud-based computing resources.

Abstract: Systems, methods, apparatuses, and computer program products for the configuration of user device(s) for reception of point-to-multipoint transmission are provided. One method may include receiving, at a user equipment, a configuration for point-to-multipoint reception of a group-common transport channel. The configuration may include a group-common signaling configuration for a group of user equipment. The method may also include receiving, at the user equipment, a point-to-multipoint reconfiguration message using the group-common signaling configuration on the group-common transport channel from a device (e.g., a network node). The point-to-multipoint reconfiguration message may include an updated point-to-multipoint configuration. The method may then include receiving point-to-multipoint data, from the device on the group-common transport channel, based on the updated point-to-multipoint configuration.

Abstract: During operation, a layer-3 (L3) router can receive a trace query to trace multicast paths associated with a multicast group. In response to detecting a layer-2 (L2) switch coupled to the L3 router, the L3 router can construct a request packet and send the request packet to the coupled L2 switch. The request packet comprises a first data block indicating that the request packet is an L2 multicast trace request, thereby causing the L2 switch to propagate the request packet to downstream L2 switches until the request packet reaches a last-hop L2 switch. The L3 router can receive, from the last-hop L2 switch, a reply packet responsive to the L2 multicast trace request, the reply packet comprising one or more data blocks, with each data block comprising information about an L2 switch or client device present on a traversed multicast path for the multicast group.

Abstract: A load control system may include a network of devices configured to communicate with one another. The load control system may include control devices configured to operate as a leader device or another router device on the network. The control device may process advertisement messages from other router devices in the network. The control device may receive advertisement messages from non-leader router devices and compare the device identifier and the sequence number in the advertisement messages with the device identifier and the sequence number in previously-received advertisement messages from the non-leader router devices. The control device may process each advertisement message received with a different sequence identifier or a different device identifier than previously received advertisement messages from the non-leader router devices.

Abstract: The present disclosure is directed to methods and systems for providing multiple networks from a gateway. A multiple network gateway system can include a gateway (e.g., a router) with the ability to support multiple, configurable, and customizable networks. The gateway can connect to a source (e.g., internet service provider (ISP), cable networks, OTA networks, satellite networks, etc.) and determine the bandwidth. Using the determined bandwidth, the gateway can allocate the bandwidth among the multiple networks according to a priority order of the networks. In some implementations, the gateway can receive customizable features from the user. Examples of the customizable features can include security options, parental controls, operational hours, MAC address specific operations, number of user limits, and internet usage tracking. The gateway can determine the priority of each network based on the customizable features.

Abstract: A computer-implemented method is provided for transparently optimizing data transmission between a first endpoint and a second endpoint in a computer network. The endpoints have a directly established data session therebetween. The data session is identified by each endpoint at least to itself in the same way throughout the session. The method includes the steps of: relaying data between the endpoints transparently in the session using a network optimization service; and transparently modifying or storing at least some of the data transmitted from the second endpoint to the first endpoint using the network optimization service in order to optimize data communications between the endpoints, wherein transparently modifying at least some of the data comprises changing the data, replacing the data, or inserting additional data such that the first endpoint receives different data than was sent by the second endpoint.

Abstract: Provided herein are systems and methods for providing a MAC-based redistribution policy between networks in a multi-area network. A network can have a boundary node that communicates to neighboring networks. Boundary nodes can receive policy updates that identify which services are redistributable across network boundaries. Boundary nodes can receive a packet for a service, translate the packet's encapsulation, and forward the packet across the boundary towards a destination node. Boundary nodes can forward the packet such that it originates in the second network from a virtual node.

Abstract: In some implementations, a network device may determine throughput rate metrics for a plurality of processing units of the network device that are processing network traffic of a network. The network device may maintain the throughput rate metrics in a status table associated with the plurality of processing units. The network device may receive tunnel traffic associated with a particular tunnel of the network. The network device may determine, based on a characteristic of the tunnel traffic, a potential throughput rate associated with processing the tunnel traffic. The network device may direct the tunnel traffic to a particular processing unit, of the plurality of processing units, based on the potential throughput rate and the throughput rate metrics indicated in the status table.

Abstract: The present disclosure provides a method in a network node implementing a Service Communication Proxy, SCP, function. The method includes: receiving, from a first Network Function, NF, a request destined to a second NF, wherein the request comprises information on the second NF; redirecting the request to a third NF, wherein the redirected request comprises information on the third NF; and transmitting a response to the first NF, wherein the response comprises the information on the third NF.

Abstract: Methods and systems that use of a multi-tiered machine learning architecture that aggregates traits of blockchain and off-chain operations. The multi-tiered machine learning architecture then uses this data to generate recommendations related to account identities for communications (e.g., blockchain operations) that occur across decentralized applications.

Abstract: A computer-implemented method for managing data records subject to placement condition rules in a distributed data management system comprising a plurality of nodes. The method may include receiving, by an endpoint management component of the distributed data management system, a request for a data record. The method may also include routing, by the endpoint management component of the distributed data management system, the request to a node of the distributed data management system. The method may also include upon determining that the request is a create request, verifying, by a service component of the distributed data management system, a placement condition rule for the data record, where the placement condition rule is retrieved from a configuration component of the distributed data management system.

Abstract: A method performed by a network node for handling one or more operations in a communications network comprising a plurality of computing devices performing one or more tasks. The network node obtains initial parameters relating to the plurality of computing devices, environment and the communications network; and generates a plan by taking one or more operation goals involving the plurality of computing devices into account as well as the obtained initial parameters, wherein the generated plan relates to operation of the plurality of computing devices. The network node further computes a number of back-up plans, wherein the number of back-up plans are taking one or more events into account wherein the one or more events relate to operation of the plurality of computing devices; and executes one or more operations using the generated plan, and in case the one or more events occur, using a computed back-up plan.

Abstract: A computer-implemented method is provided for transparently optimizing data transmission between a first endpoint and a second endpoint in a computer network. The endpoints have a directly established data session therebetween. The data session is identified by each endpoint at least to itself in the same way throughout the session. The method includes the steps of: relaying data between the endpoints transparently in the session using a network optimization service; and transparently modifying or storing at least some of the data transmitted from the second endpoint to the first endpoint using the network optimization service in order to optimize data communications between the endpoints, wherein transparently modifying at least some of the data comprises changing the data, replacing the data, or inserting additional data such that the first endpoint receives different data than was sent by the second endpoint.

Abstract: Systems and methods for providing web service instances to support traffic demands for a particular web service in a large-scale distributed system are disclosed. An example method includes determining a peak historical service load for the web service. The service load capacity for each existing web service instance may then be determined. The example method may then calculate the remaining service load after subtracting the sum of the service load capacity of the existing web service instances from the peak historical service load for the web service. The number of web service instances necessary in the large-scale distributed system may be determined based on the remaining service load. The locations of the web service instances may be determined and changes may be applied to the large-scale system based on the number of web service instances necessary in the large-scale distributed system.

Abstract: Systems and methods for providing synchronous transmission of streaming media are disclosed. One method may include: receiving, from a first user device associated with a first user, a request to invite a second user to a virtual media streaming session; retrieving, from the at least one database, a second user profile, the second user profile identifying a second user device associated with the second user; transmitting, subsequent to the retrieving, instructions to the second user device to present a notification alerting the second user of the request; determining, using a processor, whether a response accepting the request is detected from the second user device; and connecting, responsive to determining that the response accepting the request was detected, the second user profile to the virtual media streaming session; wherein multimedia content presented in the virtual media streaming session is simultaneously viewable on the first user device and the second user device.

Abstract: A packet sending method includes: A first device obtains geographical location information of the first device, and generates a first Internet Protocol version 6 IPv6 packet, where the first IPv6 packet carries the geographical location information of the first device; and the first device sends the first IPv6 packet.

Abstract: A system and method of performing an AES encryption, while also determining whether a potentially successful DFA attack is underway is disclosed. When interim results are not visible, the DFA attack that is most likely to be succeed is initiated by introducing the fault between the MixColumns operation in the second to last round and the MixColumns operation in the next to last round. To detect this, the present system and method performs the next to last round and then repeats this next to last round. The results of the original round and repeated round are compared to identify a possible DFA attack. Importantly, the same hardware is used for the original round and the repeated round. In this way, the amount of additional hardware needed to detect a possibly successful DFA attack is minimized. Further, the impact on execution time may be 10% or less.

Abstract: An information handling system may include a management controller configured to provide out-of-band management of the information handling system. The management controller may be configured to: receive network traffic from a client information handling system, the network traffic relating to management of the information handling system; and transmit at least a portion of the network traffic to a traffic classifier. The traffic classifier may be configured to: determine a protocol associated with the network traffic; compare the network traffic with protocol-specific classification data based on the determined protocol; and determine, based on the comparison, a likelihood that the network traffic is malicious. Based on the determined likelihood exceeding a threshold, the management controller may be configured to execute a remedial action with respect to the network traffic.

Abstract: A method implemented by a first node in a segment routing (SR) network domain includes receiving, from a second node of another network domain, a packet that is to pass through the SR network domain in accordance with segment identifiers (SIDs). The method also includes obtaining compressed SIDs corresponding to some of the SIDs. The method includes generating, by the first node, a segment routing header (SRH) having a list of segments and a segment left (SL) field. The method finally includes adding the SRH to the packet, and forwarding the packet with the SRH to a third node in the SR network domain.

Abstract: Techniques are described for communications in an L2 virtual network of a customer. In an example, the L2 virtual network includes a plurality of L2 compute instances hosted on a set of host machines and a plurality of L2 virtual network interfaces and L2 virtual switches hosted on a set of network virtualization devices. An L2 virtual network interface emulates an L2 port of the L2 virtual network. Information associated with the L2 virtual switches is collected and provided to the customer.